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— 35. A system for managing user accounts and controlling anonymous access to 
resources over data networks for a plurality of provider members in a manner to preserve the 
secrecy of the identity of a user who is in a home provider's user/customer base, said system 
comprising: 

(a) a means for sharing non-identifying user information and charges among a plurality 
of service provider members comprising a home provider and an outside provider, 

(b) a means for enabling a user who is registered as a customer with the home 
provider to anonymously access the resources of the outside provider, 

(c) a settling means adapted to allow the system to settle accounts among service 
providers by charging the home provider for access by its user to the resources of the outside 
provider, 

(d) a payment means adapted to assure that the outside provider is then paid for said 
access through the system, 

(e) a sharing means adapted to allow the system to permit the home provider to enable 
access by the user to the resources of the outside provider without requiring either personal 
identification or an open account for the user at the outside provider, and 

(f) a verification means separate from the home provider adapted to allow the outside 
provider to determine the user's access privileges and criteria. 

36. A system as recited in claim 35 wherein said verification means comprises a token 
and authentification server. 

37. A system as recited in claim 35 wherein said verification means does not have 
access to personal identification information of said user. 

38. A system as recited in claim 36 wherein said verification means does not have 
access to personal identification information of said user. 

39. A system as recited in Claim 35, wherein a plurality of provider members of the 
system may aggregate, transfer, and share data about the users of the system, in a 
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standardized form which identifies each user by a unique alpha-numeric sequence, but 
wherein personal identifying attributes of the client do not need to be known to any provider 
member except the member responsible for enrolling the user. 

40. A system as recited in Claim 39, to handle a potential user, wherein a verification 
server separate from said provider members is adapted to allow a member to verify that a 
potential user is a client of the system/ a customer of a member provider, but wherein the 
server does not have access to the personal identity of said potential user. 

41. A system as recited in Claim 35, further comprising a means for enabling a user 
who is registered as a customer with the home provider to access the resources of the outside 
provider, said means allowing the appearance that the resources are accessed directly from 
the home provider, — 
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